Social-login wallets had a rough weekend.
Web3Auth, the service that lets apps create a crypto wallet behind a Google or Apple sign-in, flagged a security incident late on Nov 6 (UTC) and paused its embedded wallet and login services. Keplr says some of its Google/Apple-login accounts were drained. Co-founder Josh Lee estimates about 20% of those accounts were affected, and only a fraction actually exploited. Wallets made with a recovery phrase or a hardware wallet were not affected.
The twist: Web3Auth has started whitehat rescue transfers out of exposed wallets, so an empty balance may be a rescue, not theft. It has published verified recovery addresses across Cosmos Hub, Osmosis, Celestia and other chains.
If you used Google/Apple login on Keplr: don't send new funds there, move what's left to a seed-phrase or hardware wallet, and trust only Keplr's official account. Anyone DMing you about "recovery" is a scammer.
Convenience is great until someone else sits on your key path.
$ATOM $TIA #Web3Auth #Keplr #WalletSecurity #CryptoSafety
Not financial advice.
Web3Auth, the service that lets apps create a crypto wallet behind a Google or Apple sign-in, flagged a security incident late on Nov 6 (UTC) and paused its embedded wallet and login services. Keplr says some of its Google/Apple-login accounts were drained. Co-founder Josh Lee estimates about 20% of those accounts were affected, and only a fraction actually exploited. Wallets made with a recovery phrase or a hardware wallet were not affected.
The twist: Web3Auth has started whitehat rescue transfers out of exposed wallets, so an empty balance may be a rescue, not theft. It has published verified recovery addresses across Cosmos Hub, Osmosis, Celestia and other chains.
If you used Google/Apple login on Keplr: don't send new funds there, move what's left to a seed-phrase or hardware wallet, and trust only Keplr's official account. Anyone DMing you about "recovery" is a scammer.
Convenience is great until someone else sits on your key path.
$ATOM $TIA #Web3Auth #Keplr #WalletSecurity #CryptoSafety
Not financial advice.
